CVE-2022-22336: IBM Sterling External Authentication Server

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a remote user to consume resources causing a denial of service due to a resource leak. IBM X-Force ID: 219395.

Affected products

• IBM Sterling External Authentication Server: version 3.4.3.2 only; version 6.0.2.0 only; version 6.0.3.0 only
• IBM Sterling Secure Proxy: version 3.4.3.2 only; version 6.0.2 only; version 6.0.3.0 only

Published 2022-02-23. Last modified 2026-06-17.